`POST /v1/control/team/{id}/mfa-reset`: clears somebody's second factor.

The path back in for a person who has lost both their phone and their recovery codes. It is deliberately an admin action rather than a self-service one: a self-service reset is a way around the second factor.

Errors

Returns 401 without a session, 403 without TeamManage, 404 when the reviewer is not in the caller’s tenant, and 503 when the enrolment or session store cannot be written.

POST /v1/control/team/{reviewer_id}/mfa-reset

`POST /v1/control/team/{id}/mfa-reset`: clears somebody's second factor.

cURL

curl --request POST \
  --url https://qa.esectra.com/v1/control/team/{reviewer_id}/mfa-reset \
  --cookie esectra_session=

Authorizations

esectra_session · string · cookie · required

A signed-in reviewer's session. httpOnly and SameSite=Lax; set by POST /v1/control/sessions and only usable once the second factor is met.

Path Parameters

reviewer_id · string · required

Reviewer identifier

Response

204

Second factor cleared